Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3135382e35392e302f32342d3234203d3e20323132323338.roa
File: 38352e3135382e35392e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: U4FCTiirlWxWY5aMxK1TkGSvCbujFlbidA/EMkk4zMA=
Subject key identifier: 4D:70:21:E2:CE:FB:A9:B9:C3:DA:FB:D3:D4:B9:A7:BB:CD:4B:98:2B
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 61665628D77C75EFB70DB485F7A7A51D89946E0B
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3135382e35392e302f32342d3234203d3e20323132323338.roa
Signing time: Wed 08 Nov 2023 09:23:57 +0000
ROA not before: Wed 08 Nov 2023 09:18:57 +0000
ROA not after: Wed 06 Nov 2024 09:23:57 +0000
asID: 212238
IP address blocks: 85.158.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Nov 2023 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:66:56:28:d7:7c:75:ef:b7:0d:b4:85:f7:a7:a5:1d:89:94:6e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Nov 8 09:18:57 2023 GMT
Not After : Nov 6 09:23:57 2024 GMT
Subject: CN=4D7021E2CEFBA9B9C3DAFBD3D4B9A7BBCD4B982B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:65:e7:bf:2c:25:3e:e4:37:2e:7f:4f:c5:
71:73:74:2b:7b:b9:dc:f1:12:0c:86:30:74:fb:1b:
01:9c:99:31:bd:de:f2:d1:84:1e:ad:d1:3e:b1:9f:
41:5c:f0:95:61:2b:f0:05:8d:d0:de:56:35:9c:0f:
5f:66:4a:42:93:16:21:50:18:af:92:25:8e:f9:0d:
77:93:58:68:e3:e6:37:08:80:9f:55:69:1f:7e:3b:
08:bf:63:cf:d8:fe:07:6a:1f:e4:a9:e1:2c:4a:e9:
36:4a:de:df:24:66:94:27:d5:bc:52:0f:8e:05:6a:
3c:70:38:82:31:f6:b1:53:cf:d3:fc:f3:07:6e:03:
69:b6:c2:6c:b7:8e:dc:1c:17:0e:ef:c4:c1:3d:3c:
02:6f:68:f2:fb:ab:54:3b:3e:4e:a9:49:38:a6:e2:
2c:af:b4:87:c9:86:b5:13:17:38:6c:c9:14:4e:b2:
94:7d:e1:af:0a:07:6f:e5:2d:83:bd:21:68:8b:00:
bb:cc:9f:94:2b:8e:a0:8a:d3:e5:59:af:ff:a1:d8:
93:dd:24:a6:1d:f8:31:e4:8e:a0:ed:a1:49:23:5d:
52:99:52:a8:af:f8:8d:a8:7b:e9:87:6b:76:15:52:
22:0e:27:a6:b7:c1:81:6a:ed:3b:4e:ed:3f:7f:7f:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:70:21:E2:CE:FB:A9:B9:C3:DA:FB:D3:D4:B9:A7:BB:CD:4B:98:2B
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3135382e35392e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.59.0/24
Signature Algorithm: sha256WithRSAEncryption
41:85:0c:b2:ec:fd:bd:89:17:fb:2f:e2:09:55:24:6e:a7:52:
7d:8b:a1:32:f1:a0:d8:0e:a5:e2:05:1c:0f:50:a8:be:b1:51:
20:8b:b6:b0:7a:b3:aa:a9:0d:02:53:c3:f8:d2:05:26:eb:9d:
55:75:c2:13:14:6d:88:53:3b:be:9c:09:15:37:fd:06:ad:33:
77:c6:4b:c7:21:a6:04:0c:f1:79:1d:d0:18:62:03:fa:b6:6f:
21:cf:63:64:77:30:6e:79:f3:69:a8:52:7c:db:02:55:ee:59:
fa:4c:ee:3c:fa:db:59:f8:31:89:4e:ce:fa:7e:69:9a:42:b8:
40:d0:68:34:69:ea:3c:9d:ab:49:48:6e:88:7a:f1:7c:8f:da:
95:b2:6a:fc:8a:54:1d:36:e0:0f:9d:eb:67:54:39:b4:18:ee:
d5:c5:4b:fb:87:ec:12:21:66:09:e5:f0:7d:1d:08:94:82:be:
28:b7:a8:8c:19:f4:a9:91:30:63:47:79:b5:55:f5:04:5c:86:
68:4a:ab:5a:ee:41:32:55:8b:7d:29:aa:ab:66:83:ba:87:a2:
c7:ea:f5:45:90:99:63:68:1c:0e:a9:b6:32:b0:23:74:e0:9d:
a5:31:b9:e3:da:ee:34:1a:57:69:25:25:4a:7e:e0:96:19:74:
24:b2:f9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:06 2024 by rpki-client on console-ams.rpki-client.org